As the Head of Security at, you’ll be our most senior and accountable security leaderYou’ll define and drive our security roadmap, staff and manage our security function, navigate our risks, ensure regulatory compliance, and help us deliver a safe and secure product to our customersYou’ll report to our Senior Director of Infrastructure Engineering, and work closely with leaders across Legal, Data, Engineering, Product, Finance and HR while maintaining direct access to our executive team and boardExpect high autonomy, frequent collaboration, a fast pace, and reliance on your own initiativeYou’ll leverage your years of technology leadership experience to define what success looks like, and to align your organization’s outcomes closely with company-level objectivesThis is a strategic and technical role that requires scaling your impact across AI tools, team leadership, cross-functional partnerships, and individual contributionsReflecting our rapid growth, is actively expanding our security function. This Security & IT organization is responsible for IT, GRC, Product Security and Corporate securityThis organization has two arms: A security engineering team covering application and infrastructure security reports to you directly, with day-to-day technical leadership from a Staff engineerAn IT & Compliance function covering IT, GRC, and Corporate Security is led by a Director who also reports to youThis team exists within the broader Infrastructure Engineering organization alongside the Quality, Sales/Support Engineering, and Dev Ops/Platform functionsThis is a fast-paced team with broad scope, high autonomy, and close collaboration across other departmentsBuilding out the team: You’ll lead hiring for engineers, GRC staff, and SOC partnersYou’ll manage reports ranging in experience from junior IC to Staff and Director level, providing mentorship and directing them toward impactful opportunitiesOwn OKR setting and broad strategic planning across Security related domainsMature our governance, risk, & compliance functions, including:
Expanding our control framework with automated evidence, policy lifecycle, risk management, and managing privacy obligations in partnership with LegalChampion an AI-first security program: direct the continued build-out of our AI-native vulnerability management and detection tooling, provide safety while the company adopts AI, and use AI to scale the team’s output well beyond its headcountSet the security culture: training, secure-by-default patterns, developer enablement, and clear expectations so every team ships securely without waiting on SecurityEnsure our customers are protected and our product is secure through experienced tool selection, organization structure, and well directed security team focusProvide technical direction and final say on security architecture across EngineeringYou’ll be accountable to the board for overall security posture and risk acceptanceOur Technology:Product services are authored as K8s-based microservices powered by Python Fast API backends and Type Script React front-end codeApps are built upon Postgres, Redis, Kafka, Elasticsearch, and SnowflakeOur infrastructure runs on AWS and leverages hosted infrastructure technologies such as EKS, MSK, Elasticache, and RDS. We use Istio for service mesh, Helm, TF and Crossplane for IAC, and Kyverno for policy-as-code enforcementVulnerabilities are managed through in-house, AI-native custom tooling that your team develops. We orchestrate open-source tools through this custom platformSecurity and application logs/metrics/events are managed through DatadogOur security stack is currently evolving as we select and quickly roll out current tools.
You’ll play a deciding role in the selection and deployment of theseAs an AI-First engineering organization, we leverage modern AI development workflows using tools such as Cursor, Claude, and internally built AI agents to accelerate implementation and iteration across our codebases. You’ll help Security drive our rapid AI adoption across tooling, process, and our productBenefitsCompetitive base salaryYearly learning & development allowanceRRSP & 401k employee contribution planBi-annual performance & compensation reviewsGenerous equity optionsHealth, dental, & vision insurance on day oneParental leave programsWellness reimbursementSupplemental Life InsuranceUnlimited PTO (yes, really!)Recharge days throughout the yearOffice in TorontoPermanent remote flexibilityWork-from-home allowanceOwned company-level security strategy, budget, and outcomes end-to-end at a fast-paced technology company10+ years in security, including 4+ years leading a security function or major pillar, and experience managing managers/directors and senior technical leaders(Staff+)Strong track record hiring security professionals and developing engineers into technical and people leadersProven success supporting rapid-paced software development teams at scaleDirect professional experience with and notable outcomes from driving AI transformation in security, engineering, and/ or IT organizationsPresented to and worked directly with a Board or Audit Committee, and with external auditors, regulators, or QSAsHands-on history in at least two of: application / product security, infra security, detection & incident response, enterprise IT & identity, and GRCExperience with security risk quantification, acceptance, and translating technical risk into business impact for executive decision-makingStood up or scaled a GRC program: control frameworks, evidence automation, policy, and privacy program management.Experience with frameworks such as SOX, GDPR, PCI, SOC2, and/or ISO27001#J-18808-Ljbffr
📌 Head Of Security (Toronto)
🏢 super
📍 Toronto